Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
File: do0jVpP2hnxbOBPaHzb-EHvR14I.mft (raw, json)
Hash identifier: tlhckQrk9IEZDgtxEEADpwGWgn2s1iQZi7c+1djyM+o=
Subject key identifier: AB:E9:3E:06:95:9C:AD:CD:51:4A:EC:99:EE:98:C8:14:FB:68:89:2A
Authority key identifier: 76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
Certificate issuer: /CN=768d235693f6867c5b3813da1f36fe107bd1d782
Certificate serial: 019A51195918D50B64C4A521318E197405F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
Manifest number: 0DE5
Signing time: Tue 04 Nov 2025 23:00:06 +0000
Manifest this update: Tue 04 Nov 2025 23:00:06 +0000
Manifest next update: Wed 05 Nov 2025 23:00:06 +0000
Files and hashes: 1: KH_j-0tZP7kZGa_RGAqb8KjeOKE.roa (hash: nJQFit94GD/cIbI8GNPP+c6lmHYIPdofJMVeQt5hkQ4=)
2: do0jVpP2hnxbOBPaHzb-EHvR14I.crl (hash: 7tRIe0AFQLaNs1uaaM2yeMqDOA8kFirf6vhWp++S/lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 22:37:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:51:19:59:18:d5:0b:64:c4:a5:21:31:8e:19:74:05:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=768d235693f6867c5b3813da1f36fe107bd1d782
Validity
Not Before: Nov 4 23:00:06 2025 GMT
Not After : Nov 5 23:00:06 2025 GMT
Subject: CN=abe93e06959cadcd514aec99ee98c814fb68892a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:3e:cd:cf:e4:64:5b:54:d2:66:c2:60:9d:cc:
87:4c:0f:4f:33:17:01:0a:57:9e:62:2d:e8:38:2a:
b5:ad:93:a4:a1:9e:3f:40:77:8b:c7:47:77:b6:41:
3b:4f:5e:fa:aa:ec:bc:77:a8:11:60:82:3e:b8:b9:
55:7b:21:be:a5:38:06:40:75:af:d3:1c:13:37:0b:
59:07:a7:5b:d9:31:a3:bc:f5:a4:89:62:68:99:81:
79:df:73:a3:b5:ea:46:6e:f0:15:4e:68:6c:0f:d4:
f5:52:e0:e9:79:da:fc:eb:b9:4c:90:77:24:ad:a5:
67:8e:cc:af:0e:a7:41:ef:ad:5a:48:ff:64:67:03:
3f:5d:48:77:b2:49:64:d0:d6:62:6a:fe:ed:3e:9d:
15:70:47:8f:13:f5:16:75:72:dd:08:17:dd:4a:d2:
cc:36:d6:f6:25:21:41:83:58:a3:a1:75:bc:a8:47:
76:cc:36:c6:0b:b8:b0:2b:c8:9e:f5:a4:12:fd:bb:
ca:a4:1c:a1:bc:7c:d3:f4:95:69:92:ce:4a:57:1f:
9d:a1:a5:73:36:ee:ca:89:74:ed:5d:5f:73:11:7f:
ee:77:ab:0f:5c:bb:74:18:04:c6:0f:99:57:bd:c1:
7d:46:f3:35:42:59:fb:10:11:fd:03:25:e6:ab:74:
e9:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E9:3E:06:95:9C:AD:CD:51:4A:EC:99:EE:98:C8:14:FB:68:89:2A
X509v3 Authority Key Identifier:
keyid:76:8D:23:56:93:F6:86:7C:5B:38:13:DA:1F:36:FE:10:7B:D1:D7:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/do0jVpP2hnxbOBPaHzb-EHvR14I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/e120ef-1430-45ea-b77f-e376b9242ea7/1/do0jVpP2hnxbOBPaHzb-EHvR14I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
59:86:3b:d6:3d:29:c0:d7:94:df:cb:29:50:53:46:4f:0a:ce:
3f:4c:84:be:ee:03:45:48:56:a1:20:bc:88:52:24:49:67:00:
fa:b6:a2:f6:8c:c1:ea:05:3d:1a:71:9a:8e:c1:16:92:22:25:
5c:06:00:76:29:6c:ed:d5:e7:f4:b3:cc:09:79:97:b5:3b:1a:
c3:bd:9d:1a:a2:d0:6a:74:e0:57:45:7b:e1:66:62:a9:cb:ac:
5f:8c:61:89:36:9f:c2:02:cb:ce:2f:ae:b4:ac:e8:51:51:0a:
80:38:c9:9a:a9:1b:e6:3e:b4:d1:e6:77:cf:a4:49:ce:41:fb:
a9:ad:10:c3:38:32:a3:9c:2b:b5:ee:31:b2:7f:a0:a9:4e:8f:
89:88:de:4e:fc:4e:2f:56:5c:25:9d:5d:25:42:32:3d:83:17:
61:ac:14:d0:e6:77:31:e1:84:33:ca:dd:2d:1a:c0:25:75:3b:
de:4a:ec:95:70:7a:dc:2d:7b:de:8d:19:d6:a5:55:00:bb:4b:
d2:ed:f8:c4:51:27:c1:23:16:8b:69:dd:6d:23:c7:36:bf:22:
da:32:2f:37:1a:be:cc:d9:15:a0:56:72:b7:ff:05:97:9d:ab:
22:88:a8:57:62:ae:4a:47:5a:16:33:cd:83:81:4e:5b:9d:e9:
9f:d7:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 05:23:52 2025 by rpki-client